Privacy
Policy

OptimumAI ("we", "our", or "us") is an AI research and education organisation. This Privacy Policy explains what personal data we collect when you use our website, platform, research tools, bootcamps, and community services (collectively, "Services"), how we use it, and the rights you have over it.

Information you provide directly

• Account details — name, email address, password, and optional profile picture when you create an account.
• Research & program submissions — papers, project briefs, bootcamp assignments, and any content you upload to the platform.
• Communications — messages you send us via email, contact forms, or community channels.
• Payment information — billing name, payment method details, and transaction history for paid programs. Card data is processed by our PCI-compliant payment processor; we do not store raw card numbers.
• Profile information — institutional affiliation, research interests, and career goals you choose to share.

Multimodal assessment data

Certain assessments and research tools on our platform may capture multimodal signals, including:

• Audio data — voice recordings captured during verbal assessments (e.g. speaking tasks).
• Video data — webcam recordings captured during assessment sessions.
• Micro-expression & facial analysis — facial landmark data derived from video to evaluate cognitive engagement.
• Gaze-tracking data — estimated eye-gaze coordinates derived from video to measure attention patterns.

Explicit consent required. We collect multimodal data only when you explicitly opt in before starting an assessment session. You may decline multimodal capture and still take assessments using standard text-based inputs. Multimodal data is processed solely for generating your assessment score and feedback. We do not use multimodal data to train commercial AI models unless you provide separate, specific consent. You may request deletion of your multimodal data at any time by emailing privacy@optimumai.in.

Information collected automatically

• Log data — IP address, browser type and version, pages visited, referring URL, and timestamps.
• Device data — operating system, device identifiers, and screen resolution.
• Usage data — features accessed, time spent, interactions with research tools, and content viewed.
• Location data — approximate country/region derived from your IP address for fraud prevention and content localisation.
• Cookies & similar technologies — see our Cookie Policy for full details.

Information from third parties

• Academic databases and public research repositories used to surface relevant papers.
• OAuth providers (e.g. Google, GitHub) if you choose to sign in via a third-party identity provider.
• Fraud-prevention and security partners to protect the integrity of our Services.

• Provide & improve our Services — process enrolments, facilitate research collaboration, personalise your dashboard, and develop new features.
• Research & model development — with your explicit opt-in consent, anonymised usage patterns may inform improvements to OptimumAI's research tools. You can opt out at any time in account settings.
• Communications — send transactional emails (receipts, application updates) and, where you have consented, program announcements and research digests.
• Safety & security — detect abuse, enforce our Acceptable Use Policy, and protect other users.
• Legal compliance — meet obligations under applicable law, respond to lawful government requests, and resolve disputes.

We do not sell or rent your personal data. We share it only in the following circumstances:

• Service providers — hosting, analytics, email delivery, payment processing, and customer support vendors acting under our instructions and bound by data-processing agreements.
• Research partners & universities — anonymised or aggregated data may be shared with academic institutions for joint research. We will notify you before sharing identifiable data with a research partner and obtain your consent.
• Business transfers — in a merger, acquisition, or asset sale your data may be transferred; we will notify affected users before this occurs.
• Legal obligations — when required by law, court order, or to protect the rights and safety of our users or the public.
• With your consent — for any purpose not listed above, we will ask for explicit consent first.

We retain personal data only as long as necessary to provide our Services and fulfil the purposes described in this policy, or as required by law. When you delete your account we remove your personal data within 30 days, except where retention is required for legal, security, or financial record-keeping purposes. Anonymised or aggregated data may be retained indefinitely.

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — ask us to delete your personal data ("right to be forgotten").
• Portability — receive your data in a structured, machine-readable format.
• Restriction — limit how we process your data in certain circumstances.
• Objection — object to processing based on legitimate interests or for direct marketing.
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior lawful processing.

To exercise any of these rights, email us at privacy@optimumai.in. We will respond within 30 days.

OptimumAI operates globally. Your data may be processed in countries outside your own. Where we transfer data from the EEA, UK, or Switzerland to countries without an adequacy decision, we rely on Standard Contractual Clauses approved by the European Commission or equivalent safeguards.

Our Services are not directed to individuals under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us data, contact us at privacy@optimumai.in and we will delete it promptly. Users aged 13–18 require parental or guardian consent.

We implement industry-standard technical and organisational safeguards including encryption in transit (TLS), encryption at rest, role-based access controls, and regular security audits. No transmission over the internet is 100% secure; please use strong, unique passwords and enable two-factor authentication.

If you are located in India, your personal data is processed in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act). As a Data Fiduciary, OptimumAI processes your data only for lawful purposes with your consent or as otherwise permitted under the Act. You have the right to:

• Information — know what personal data we collect and how we use it.
• Correction & erasure — request correction of inaccurate data or erasure of data no longer necessary.
• Grievance redressal — raise concerns by emailing privacy@optimumai.in. We will acknowledge within 48 hours and resolve within 30 days.
• Nomination — nominate an individual to exercise your rights in the event of your death or incapacity.

We do not process personal data of children under 18 without verifiable parental consent, in compliance with Section 9 of the DPDP Act.

We may update this policy from time to time. We will notify you of material changes by email or prominent in-app notice at least 14 days before they take effect. Continued use of our Services after the effective date constitutes acceptance of the revised policy.

For privacy-related questions or to exercise your rights, contact our Data Protection team:
Email: privacy@optimumai.in
Mail: OptimumAI · Attn: Privacy Team · Plot No 7/A, Alijapur, ToliChowki, Hyderabad, Telangana 500008, India